generated: '2026-07-19'
method: searched
source: https://gorila.com.br/core/en/docs/quickstart/
docs: https://gorila.com.br/core/en/docs/quickstart/
summary:
  types: [apiKey]
  api_key_in: [header]
  oauth2_flows: []
notes: >-
  GorilaCORE authenticates every request with a static API key passed directly
  in the HTTP Authorization header (no "Bearer" prefix). Keys are issued per
  integrating institution. No OAuth2, OpenID Connect, or mutualTLS scheme is
  documented on the public developer surface.
schemes:
- name: apiKey
  type: apiKey
  in: header
  parameter_name: Authorization
  description: >-
    Static API key sent verbatim in the Authorization header, e.g.
    Authorization: c1deeef8-4812-4bd3-903e-8adeaff3903d
  sources: [https://gorila.com.br/core/en/docs/quickstart/]